Login Register
Web Apps Intermediate

API Testing

Recon undocumented APIs, test every method and parameter, and exploit the bugs APIs are prone to: mass assignment, BOLA/IDOR, and server-side parameter pollution.

Samantha Beahan 5 lessons

About this class

What you'll learn

APIs expose more functionality with less UI to hide behind. This class covers discovering API endpoints and documentation, testing methods and parameters, mass assignment, broken object-level authorisation, server-side parameter pollution, a note on GraphQL, and prevention.

Practice

Pair with API recon: finding hidden parameters and API mass-assignment privilege escalation.

Curriculum

  1. 1. API recon Free 15m
  2. 2. Testing methods, parameters, and content types Free 16m
  3. 3. Mass assignment 15m
  4. 4. Server-side parameter pollution and injection 14m
  5. 5. GraphQL notes and preventing API bugs 13m

API testing labs

View all labs
On this page
What you'll learn Practice

Price

0.0120 BTC

≈ $780.00

Sign In to Enrol

At a glance

Category
Web Apps
Difficulty
Intermediate
Lessons
5 ยท 2 free
Total time
1h 13m
Students
0 enrolled
Tutor
Samantha Beahan
Published
Sep 2026